using env files but overcomplicated

This commit is contained in:
pierre.geeraert
2026-10-08 11:31:43 +01:00
parent caac327b50
commit 5289cab76e
9 changed files with 111 additions and 3 deletions
+20 -2
View File
@@ -128,9 +128,9 @@ kubernetes = {
replicas = 1
name = "bitwarden-admin"
image = "ghcr.io/bitwarden/admin:2026.1.0"
extra_manifest = ["/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/config.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/global.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/global.override.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/mssql.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/mssql.override.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/uid.env.configmap.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/bitwarden-identity-cert-password.secret.yml", "/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/identity-svc.svc.yaml"]
service_port = [5000]
config_map_ref = ["global.env", "uid.env", "global.override.env"]
secret_ref = ["global.override.secret"]
environment = {}
pvc = {
@@ -168,6 +168,7 @@ kubernetes = {
image = "gitea.tryton.geeraert.eu/pi-ux-ce/bitbetter_api:2026.1.0"
service_port = [5000]
config_map_ref = ["global.env", "uid.env", "global.override.env"]
secret_ref = ["global.override.secret"]
environment = {}
pvc = {
@@ -225,6 +226,7 @@ kubernetes = {
image = "ghcr.io/bitwarden/events:2026.1.0"
service_port = [5000]
config_map_ref = ["global.env", "uid.env", "global.override.env"]
secret_ref = ["global.override.secret"]
environment = {}
pvc = {
@@ -277,9 +279,11 @@ kubernetes = {
connected_namespace = "bitwarden"
replicas = 1
name = "bitwarden-identity"
extra_manifest = ["/opt/kubernetes/Terraform_kube/external_manifests/bitwarden/identity-svc.svc.yaml"]
image = "gitea.tryton.geeraert.eu/pi-ux-ce/bitbetter_identity:2026.1.0"
service_port = [5000]
config_map_ref = ["global.env", "uid.env", "global.override.env"]
secret_ref = ["global.override.secret"]
environment = {}
pvc = {
@@ -318,7 +322,8 @@ kubernetes = {
name = "bitwarden-mssql"
image = "ghcr.io/bitwarden/mssql:2026.1.0"
service_port = [1433, 5000]
config_map_ref = ["mssql.env", "uid.env", "mssql.override.env"]
config_map_ref = ["mssql.env", "uid.env"]
secret_ref = ["mssql.secret"]
environment = {}
database = {
shunt = "true"
@@ -392,6 +397,7 @@ kubernetes = {
image = "ghcr.io/bitwarden/notifications:2026.1.0"
service_port = [5000]
config_map_ref = ["global.env", "uid.env", "global.override.env"]
secret_ref = ["global.override.secret"]
environment = {}
pvc = {
@@ -418,6 +424,7 @@ kubernetes = {
image = "ghcr.io/bitwarden/sso:2026.1.0"
service_port = [5000]
config_map_ref = ["global.env", "uid.env", "global.override.env"]
secret_ref = ["global.override.secret"]
environment = {}
pvc = {
@@ -469,3 +476,14 @@ kubernetes = {
}
}
# Config kept as plain env files in external_manifests/, rendered into ConfigMaps/Secrets by env_files.tf.
# Reference them from a service with config_map_ref / secret_ref (names below).
env_files = {
"global.env" = { namespace = "bitwarden", path = "../external_manifests/bitwarden/global.env" }
"global.override.env" = { namespace = "bitwarden", path = "../external_manifests/bitwarden/global.override.env" }
"uid.env" = { namespace = "bitwarden", path = "../external_manifests/bitwarden/uid.env" }
"mssql.env" = { namespace = "bitwarden", path = "../external_manifests/bitwarden/mssql.env" }
"global.override.secret" = { namespace = "bitwarden", path = "../external_manifests/bitwarden/global.override.secret.env", secret = true }
"mssql.secret" = { namespace = "bitwarden", path = "../external_manifests/bitwarden/mssql.secret.env", secret = true }
}